Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144175.roa
File:                     AS144175.roa (raw, json)
Hash identifier:          ueeq+n69SeZptmfLli6/28Zz57CtYNt/NuMgviWJd34=
Subject key identifier:   66:21:3C:91:B1:0F:4D:3B:80:F4:6B:69:C3:62:8B:C3:03:5F:75:8D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4CF32E3268A55A49E407CB90E459A1F64E149548
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144175.roa
Signing time:             Fri 22 May 2026 07:32:02 +0000
ROA not before:           Fri 22 May 2026 07:27:02 +0000
ROA not after:            Fri 21 May 2027 07:32:02 +0000
asID:                     144175
IP address blocks:        240a:a5f5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:2e:32:68:a5:5a:49:e4:07:cb:90:e4:59:a1:f6:4e:14:95:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:02 2026 GMT
            Not After : May 21 07:32:02 2027 GMT
        Subject: CN=66213C91B10F4D3B80F46B69C3628BC3035F758D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:77:cc:0f:96:64:9f:26:b0:ff:40:20:45:
                    2b:79:f4:f6:49:1d:62:e4:90:c8:ce:fe:e5:1e:df:
                    12:7f:5c:01:f9:41:72:77:95:64:09:31:d9:49:82:
                    be:25:79:4e:2f:4e:4c:3a:24:3b:3f:7f:1e:8f:ed:
                    43:06:c3:ca:6b:09:c3:5f:65:3b:4a:a9:cb:06:87:
                    64:87:a3:5f:4b:50:85:d2:63:24:b5:9d:a9:2a:2e:
                    36:de:23:75:0c:21:23:ac:ff:2a:ea:a9:0c:78:a2:
                    6a:b9:da:7f:4d:df:3a:87:55:c6:d3:07:b3:00:82:
                    37:87:61:2f:21:ad:01:1a:c0:bb:db:1a:f3:12:62:
                    5f:46:24:90:e6:b7:da:72:55:5e:5d:d4:a5:c2:94:
                    a9:29:ed:6b:1e:82:64:d4:46:a8:f1:c9:ac:bc:e7:
                    6a:f3:f6:e4:06:99:01:16:6c:f1:fa:2f:a5:7b:73:
                    e4:8c:c3:10:48:55:6e:df:e7:fb:f7:9e:b7:9e:70:
                    4c:41:4c:0f:df:a0:54:60:0e:4c:4b:d3:e1:2c:f7:
                    bb:57:66:a4:5d:bf:b9:a0:57:d6:ef:a8:2c:fd:e4:
                    66:43:8a:81:21:c1:b4:b2:dd:e0:2a:d2:af:05:11:
                    99:45:6c:c0:4c:c6:c3:c0:1c:7d:bd:ea:44:42:91:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:21:3C:91:B1:0F:4D:3B:80:F4:6B:69:C3:62:8B:C3:03:5F:75:8D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144175.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5f5::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:a5:72:c3:8e:c0:b6:06:32:c1:69:3d:a0:01:46:1c:a4:
         e0:34:28:69:83:87:2f:9e:23:75:63:1b:0d:a0:7a:5d:51:d5:
         7f:7c:3a:96:cf:ae:ea:e4:7e:f4:d3:23:e1:97:aa:66:cb:94:
         52:93:e9:f9:cf:61:1f:de:77:87:d3:5d:34:7c:92:e1:00:a6:
         dc:b5:1b:99:1a:22:96:a3:bb:17:dc:49:bb:04:d2:21:32:de:
         a2:44:33:5d:a5:6f:b5:cf:dc:fc:fe:97:9c:02:32:8f:74:b6:
         38:56:04:a3:be:99:2e:f5:50:b5:4d:62:a3:32:3d:2b:78:45:
         a4:8f:02:c6:3f:5d:81:05:2d:1c:f6:9c:71:16:0d:67:78:48:
         a0:e1:dd:54:84:7c:28:65:f2:c5:59:8e:bf:2d:76:f1:e5:93:
         6b:26:2c:e3:c6:ad:ad:92:6d:18:00:9c:10:c9:b1:e8:bd:d0:
         4d:c9:af:b1:b6:74:b3:5b:6b:bf:3f:46:ac:98:e5:22:8e:43:
         bc:9e:f8:9b:0c:e9:6a:91:28:18:a3:df:a2:f9:cf:f7:c6:e0:
         e0:fc:97:ef:84:79:bb:73:1a:6d:b0:1e:ee:e9:25:37:38:a9:
         ff:e3:26:e9:cf:ab:7b:b0:36:37:94:ff:69:d2:b2:f2:c3:5a:
         58:4f:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client